Single sign-on

Learn how to enable SSO on Breakroom and customize your end-user login experience.

Overview

By enabling single sign-on (SSO) on Breakroom, you can provide your users with a secure and simplified login process. Integrating your current identity management system with Breakroom takes only a few minutes, but has the potential to save you a lot of hassle.

In order to enable SSO, you will need to contract for services with an Identity Provider (IdP). Some IdPs to consider include Okta and Microsoft Azure.

Only World Owners and World Administrators can access the Dashboard.

Enabling SSO

To enable SSO within Breakroom, you will need to copy the parameters Breakroom provides and enter them into your IdP's SAML Signing Certificate generator. Your IdP will then provide you with a SAML Signing Certificate, which will include a metadata file containing additional information. You will need to enter this information into the Breakroom Dashboard in order to complete setup.

Highlighted: The Dashboard > World Customization > World Access tab, and the location of the SSO Login toggle.

You can enable SSO within Breakroom by following the steps below.

1. Navigate to your Dashboard.
2. Click on the World Customization > World Access tab.

3. Click the SSO Login toggle to enable SSO.

Pictured: The SSO Settings > Identity Provider Setup panel.

1. Once the SSO Login toggle is enabled, several additional sections will appear on your screen. Scroll down to the Identity Provider Setup panel.

2. Here you will see two parameters provided in the form of links—the SSO URL and the SP Entity ID. You can click the copy icon located next to either of these parameters in order to copy it.

3. Enter these parameters into the SAML Signing Certificate generator on your IdP's website. Once your IdP finishes creating your SAML Signing Certificate, they will provide you with a metadata file.

Pictured: The IdP panel.

1. Return to the Breakroom Dashboard and scroll to the Details Provided by your Identity Provider section. Enter the Entity ID, X.509 Certificate, and Sign-in URL parameters from the IdP metadata file into the relevant fields.

2. Click the Save button.

Important notes

Upon enabling SSO, user accounts are not automatically generated in Breakroom, and you will not see any users appear under the Manage Users tab. Instead, Breakroom accounts will be generated as users log in. Each user account will occupy one of the available seats under your Breakroom account.

Disabling SSO

To disable SSO integration, follow steps 1-2 as detailed above and click the SSO Login toggle again.

Customizing the Breakroom login screen

Pictured: Here the SSO buton has been customized, and the self registration and standard login features have been disabled. The end result is visible in the Login Screen Preview panel.

The World Access tab features a login panel preview, so you can see how your changes will appear on the World Stream landing page and on the desktop app. You can also personalize your SSO button with a logo and custom text.

To customize the login panel, follow these steps.

1. Navigate to your Dashboard.
2. Click on the World Customization > World Access tab.

3. First, choose which login methods will be available for your users.

   1. Enable or disable self-registration.
   2. Enable or disable SSO.
   3. Enable or disable the standard login (Breakroom account email and password).

4. If you have chosen to enable SSO, you can then customize the SSO login button appearance.

   1. In the Button Text field, enter the text you would like to appear on the button.

   2. If you want to upload a custom logo for the SSO login button, click the Browse link in the Button Image field. This will launch a standard file import window on your computer. Locate the image file you want to use, click on it, and then click the Open button.

   3. If you want to clear the current logo, click the Delete button.

5. When you are satisfied with your changes, click the Save button.